Curriq Privacy Policy
Updated September 29, 2026
Who is responsible
This notice covers Curriq, operated by 9547-8715 Quebec inc., doing business as InnovaLabWorks, Montreal, Quebec, Canada. Contact us through Settings → Support or https://innovalabworks.com/contact/ for privacy questions, access, correction or deletion requests. No separate Curriq account is required.
Your documents and private iCloud
Resumes, cover letters, applications, photos, settings and credit history are stored on your device. Where iCloud sync is available and enabled, app records can also synchronize through your private Apple iCloud account. Sync depends on Apple account, connectivity and storage availability. Exported PDFs, Word files and files you share are separate copies controlled by you and their recipients. Uninstalling Curriq does not necessarily delete iCloud copies or exports.
Optional AI and the information sent
AI requires your permission and an action you choose. Selected resume text or import files, relevant job details, instructions and the chosen language travel over HTTPS through our Cloudflare-hosted gateway to Anthropic’s Claude API. An imported file can contain names, contact details, work history, photos and other information included in that file. Only submit information you are entitled to share. Manual editing and document export do not require AI. You can withdraw permission in Settings to stop future AI requests.
AI retention and recovery
Our gateway does not persist uploaded request bodies or Apple signed proofs. To recover an interrupted delivery without charging twice, it retains an encrypted AI response for up to 24 hours, then removes its content. Your device retains pending request identifiers and received results until they are saved, acknowledged or deleted. We retain a pseudonymous account identifier, purchase identifiers, credit grants, request identifiers and accounting status to preserve paid rights and prevent duplicate charges and abuse; these records do not contain your resume text. Contact support to request deletion, subject to necessary accounting, fraud-prevention and legal retention.
Anthropic and infrastructure
Anthropic’s standard API policy deletes inputs and outputs within 30 days, with exceptions for safety enforcement, legal obligations or different contractual arrangements. API inputs and outputs are not used for model training by default. We do not promise zero retention. See https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data and https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training. Cloudflare operates our gateway, hosting and security. Infrastructure providers may process technical request information such as IP addresses. Providers may process data outside Quebec and Canada.
Purchases, support and other optional services
Apple processes payments; we do not receive your card number. Apple-signed purchase and app transaction information is used to verify access, restore purchases and reconcile credits. Support receives the contact details, message, selected attachments and diagnostics shown in the support form, including app/device information and troubleshooting status. Support uses Cloudflare, ClickUp and email delivery services including Brevo. Records remain as needed to resolve requests, maintain service history and meet legal obligations. A support request does not subscribe you to marketing. A separately requested newsletter uses the email you provide; you can unsubscribe. Address autocomplete sends your search to Apple MapKit.
Your choices, deletion and limits
You can edit or delete documents, manage iCloud in Apple settings, change AI permission, manage subscriptions in the App Store, and contact support about privacy rights. Settings → Delete My Data removes app records and requests deletion of the app’s iCloud data; an offline cloud deletion must wait for connectivity. It does not cancel an Apple subscription, delete copies already exported or sent to others, or automatically erase support and accounting records. Cached server AI content expires within its stated retention period. Ask support about any retained records. We do not sell personal information or use it to build advertising profiles. Curriq is not directed to children under 16.
Security, rights and changes
We use encrypted transport, protected local storage and access controls. No storage or network service is risk-free. Processing supports the features you request, your consent where required, security and accounting obligations. Depending on your location, you may have rights to access, correct, receive or delete personal information, withdraw consent, or complain to your privacy regulator. We assess requests and explain any lawful retention limits. This notice may change when the service changes; the date below identifies this version.